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. .MOBILE TERMINAL MH21 
.ACCESS PLANT AP21 
. .AUTHENTICATION SERVER 
. . REQUEST TO AUTHENTICATION 
.TRANSMIT REFUSE ACCESS MESSAGE 
DEFEAT 

..TRANSMIT THE FEATURE INFORMATION P 

..SUCCESSFUL 

..GENERATING KEY FROM THE FEATURE 

INFORMATION P 
..RETURN TO DETERMINE 
. .TRANSMIT THE NOTICE INFORMATION TO 

ALLOW ACCESS 
..GENERATING THE KEY FROM THE STO RAGED 

FEATURE INFORMATION P, ENCRYPT THE 

DATA PACKET USING THE KEY AND MODIFY 

THE ENCRYPTED IDENTIFY 
. . SEND THE ENCRYPTED DATA PACKET 
. DETECT THE ENCRYPTED IDENTIFY AND 

D IS ENCRYPT THE DATA PACKET USING KEY 
...SEND THE DATA PACKET 



(57) Abstract: An method for distributes the encrypted key in wireless LAN, this method combines the distribution course of 
the key with authentication course of the mobile terminal, utilizes the authentication server or the wireless gateway to manage 
the distribution of the key, so mobile terminal users may be roam in range greater than the range of the key manage server 
covers. Because the distribution of the key does not involve transmitting the key, which was not encrypted through the air 
interface, the method has ensured that the key is safe. In addition, the above-mentioned key distribution method docs not depend 
on the specific authentication, therefore can use it under various kinds of authentication agreements. Finally, because AP does 
not need to manage user's information, the method simplified the structure of AP thus lowered costs. 
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